Update ghcr.io/dexidp/dex Docker tag to v2.42.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/dexidp/dex	minor	v2.39.1 -> v2.42.0

---

Release Notes

dexidp/dex (ghcr.io/dexidp/dex)

v2.42.0

Compare Source

What's Changed

Exciting New Features 🎉

• feat: also allow localhost equivalent IP addresses by @​dsonck92 in https://github.com/dexidp/dex/pull/3778

Enhancements 🚀

• Added Discovery to grpc by @​koendelaat in https://github.com/dexidp/dex/pull/3598
• feat(metrics): add response_size, request_duration histograms by @​IvoGoman in https://github.com/dexidp/dex/pull/3748
• Handle root path better (than nothing) by @​nabokihms in https://github.com/dexidp/dex/pull/3747
• Support base64 encoded and PEM encoded certs by @​nabokihms in https://github.com/dexidp/dex/pull/3751
• GitLab connector: add GitLab additional group with role by @​zvlb in https://github.com/dexidp/dex/pull/2941
• OIDC Connector: Support for IssuerAlias and group claims with maps instead of strings by @​meldsza in https://github.com/dexidp/dex/pull/3676
• Add CSS for example app to make it prettier by @​nabokihms in https://github.com/dexidp/dex/pull/3886
• feat: set resource revision for connectors by @​nrwiersma in https://github.com/dexidp/dex/pull/3868
• Add authproxy preferred_username header by @​kotx in https://github.com/dexidp/dex/pull/3950
• Passing context storage by @​bobmaertz in https://github.com/dexidp/dex/pull/3941

Bug Fixes 🐛

• Fix scheme for DialURL ldap connection by @​nabokihms in https://github.com/dexidp/dex/pull/3677
• Change workdir for gomplate by @​nabokihms in https://github.com/dexidp/dex/pull/3684
• fix unmarshaling of expanded environment variables with special characters by @​tuminoid in https://github.com/dexidp/dex/pull/3770
• saml connector: fix nil pointer PANIC on validate saml by @​siarhei-haurylau in https://github.com/dexidp/dex/pull/3793
• fix: update enhancement proposal link by @​emmanuel-ferdman in https://github.com/dexidp/dex/pull/3755
• Create offline sessions if approval is skipped by @​nabokihms in https://github.com/dexidp/dex/pull/3828

Dependency Updates ⬆️

• build(deps): bump golang from 1.22.5-alpine3.20 to 1.23.1-alpine3.20 by @​dependabot in https://github.com/dexidp/dex/pull/3728
• build(deps): bump alpine from 3.20.2 to 3.20.3 by @​dependabot in https://github.com/dexidp/dex/pull/3729
• build(deps): bump golang.org/x/net from 0.27.0 to 0.29.0 by @​dependabot in https://github.com/dexidp/dex/pull/3726
• build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.23.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3722
• build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.3 by @​dependabot in https://github.com/dexidp/dex/pull/3727
• build(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.1 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3731
• build(deps): bump distroless/static-debian12 from 8dd8d3c to 42d15c6 by @​dependabot in https://github.com/dexidp/dex/pull/3724
• build(deps): bump tonistiigi/xx from 1.4.0 to 1.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/3705
• build(deps): bump google.golang.org/api from 0.190.0 to 0.196.0 by @​dependabot in https://github.com/dexidp/dex/pull/3721
• build(deps): bump docker/build-push-action from 6.5.0 to 6.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/3696
• build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.23.0 by @​dependabot in https://github.com/dexidp/dex/pull/3723
• build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @​dependabot in https://github.com/dexidp/dex/pull/3685
• build(deps): bump actions/upload-artifact from 4.3.4 to 4.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/3720
• build(deps): bump github.com/dexidp/dex/api/v2 from 2.1.0 to 2.2.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3734
• build(deps): bump mheap/github-action-required-labels from 5.4.1 to 5.4.2 by @​dependabot in https://github.com/dexidp/dex/pull/3735
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.22 to 1.14.23 by @​dependabot in https://github.com/dexidp/dex/pull/3738
• build(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.2 by @​dependabot in https://github.com/dexidp/dex/pull/3742
• build(deps): bump distroless/static-debian12 from 42d15c6 to dcd3f1f by @​dependabot in https://github.com/dexidp/dex/pull/3754
• build(deps): bump anchore/sbom-action from 0.17.0 to 0.17.2 by @​dependabot in https://github.com/dexidp/dex/pull/3746
• build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/3753
• build(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.28.0 by @​dependabot in https://github.com/dexidp/dex/pull/3797
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.13 by @​dependabot in https://github.com/dexidp/dex/pull/3795
• build(deps): bump golang from 1.23.1-alpine3.20 to 1.23.2-alpine3.20 by @​dependabot in https://github.com/dexidp/dex/pull/3775
• build(deps): bump distroless/static-debian12 from dcd3f1f to 26f9b99 by @​dependabot in https://github.com/dexidp/dex/pull/3766
• build(deps): bump cloud.google.com/go/compute/metadata from 0.5.0 to 0.5.2 by @​dependabot in https://github.com/dexidp/dex/pull/3764
• build(deps): bump docker/setup-buildx-action from 3.6.1 to 3.7.1 by @​dependabot in https://github.com/dexidp/dex/pull/3781
• build(deps): bump google.golang.org/grpc from 1.66.1 to 1.67.1 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3774
• build(deps): bump docker/build-push-action from 6.7.0 to 6.9.0 by @​dependabot in https://github.com/dexidp/dex/pull/3772
• build(deps): bump anchore/sbom-action from 0.17.2 to 0.17.4 by @​dependabot in https://github.com/dexidp/dex/pull/3801
• build(deps): bump github.com/prometheus/client_golang from 1.19.1 to 1.20.5 by @​dependabot in https://github.com/dexidp/dex/pull/3799
• build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @​dependabot in https://github.com/dexidp/dex/pull/3802
• build(deps): bump actions/dependency-review-action from 4.3.4 to 4.3.5 by @​dependabot in https://github.com/dexidp/dex/pull/3804
• build(deps): bump anchore/sbom-action from 0.17.4 to 0.17.5 by @​dependabot in https://github.com/dexidp/dex/pull/3803
• build(deps): bump sigstore/cosign-installer from 3.6.0 to 3.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/3800
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.23 to 1.14.24 by @​dependabot in https://github.com/dexidp/dex/pull/3805
• build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by @​dependabot in https://github.com/dexidp/dex/pull/3806
• build(deps): bump actions/checkout from 4.1.7 to 4.2.1 by @​dependabot in https://github.com/dexidp/dex/pull/3785
• build(deps): bump google.golang.org/api from 0.196.0 to 0.203.0 by @​dependabot in https://github.com/dexidp/dex/pull/3807
• build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @​dependabot in https://github.com/dexidp/dex/pull/3808
• build(deps): bump actions/dependency-review-action from 4.3.5 to 4.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/3814
• build(deps): bump distroless/static-debian12 from 26f9b99 to 3a03fc0 by @​dependabot in https://github.com/dexidp/dex/pull/3812
• build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by @​dependabot in https://github.com/dexidp/dex/pull/3809
• build(deps): bump anchore/sbom-action from 0.17.5 to 0.17.6 by @​dependabot in https://github.com/dexidp/dex/pull/3817
• build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/3822
• build(deps): bump alpine from beefdbd to 1e42bbe by @​dependabot in https://github.com/dexidp/dex/pull/3840
• build(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3832
• build(deps): bump golang from 1.23.2-alpine3.20 to 1.23.3-alpine3.20 by @​dependabot in https://github.com/dexidp/dex/pull/3834
• build(deps): bump anchore/sbom-action from 0.17.6 to 0.17.8 by @​dependabot in https://github.com/dexidp/dex/pull/3858
• build(deps): bump distroless/static-debian12 from 3a03fc0 to d71f4b2 by @​dependabot in https://github.com/dexidp/dex/pull/3839
• build(deps): bump golang from 0974259 to c694a4d by @​dependabot in https://github.com/dexidp/dex/pull/3863
• build(deps): bump tonistiigi/xx from 1.5.0 to 1.6.1 by @​dependabot in https://github.com/dexidp/dex/pull/3879
• build(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group by @​dependabot in https://github.com/dexidp/dex/pull/3893
• build(deps): bump golang.org/x/crypto from 0.26.0 to 0.31.0 in /examples in the go_modules group by @​dependabot in https://github.com/dexidp/dex/pull/3892
• build(deps): bump github/codeql-action from 3.27.0 to 3.28.0 by @​dependabot in https://github.com/dexidp/dex/pull/3898
• build(deps): bump actions/upload-artifact from 4.4.0 to 4.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/3890
• build(deps): bump actions/attest-build-provenance from 1.4.3 to 2.1.0 by @​dependabot in https://github.com/dexidp/dex/pull/3878
• build(deps): bump golang from 1.23.3-alpine3.20 to 1.23.4-alpine3.20 by @​dependabot in https://github.com/dexidp/dex/pull/3866
• build(deps): bump distroless/static-debian12 from d71f4b2 to 6cd937e by @​dependabot in https://github.com/dexidp/dex/pull/3864
• build(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/3862
• build(deps): bump docker/metadata-action from 5.5.1 to 5.6.1 by @​dependabot in https://github.com/dexidp/dex/pull/3861
• build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 by @​dependabot in https://github.com/dexidp/dex/pull/3851
• build(deps): bump gomplate from 4.0.1 to 4.3.0 by @​MoeBensu in https://github.com/dexidp/dex/pull/3856
• build: update Go version by @​sagikazarmark in https://github.com/dexidp/dex/pull/3913
• build(deps): bump github.com/beevik/etree from 1.4.0 to 1.4.1 by @​dependabot in https://github.com/dexidp/dex/pull/3638
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.15 to 3.5.17 by @​dependabot in https://github.com/dexidp/dex/pull/3842
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3903
• build(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3904
• build(deps): bump alpine from 3.20.3 to 3.21.2 by @​dependabot in https://github.com/dexidp/dex/pull/3909
• build(deps): bump golang.org/x/net from 0.30.0 to 0.33.0 in the go_modules group by @​dependabot in https://github.com/dexidp/dex/pull/3911
• build(deps): bump docker/setup-qemu-action from 3.2.0 to 3.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/3914
• build(deps): bump helm/kind-action from 1.10.0 to 1.12.0 by @​dependabot in https://github.com/dexidp/dex/pull/3917
• build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/3916
• build(deps): bump anchore/sbom-action from 0.17.8 to 0.17.9 by @​dependabot in https://github.com/dexidp/dex/pull/3915
• build(deps): bump actions/cache from 4.1.2 to 4.2.0 by @​dependabot in https://github.com/dexidp/dex/pull/3918
• build(deps): bump golang from 1.23.4-alpine3.20 to 1.23.5-alpine3.20 by @​dependabot in https://github.com/dexidp/dex/pull/3928
• build(deps): bump golang.org/x/net from 0.30.0 to 0.34.0 by @​dependabot in https://github.com/dexidp/dex/pull/3920
• build(deps): bump distroless/static-debian12 from 6cd937e to 6ec5aa9 by @​dependabot in https://github.com/dexidp/dex/pull/3922
• build(deps): bump golang.org/x/net from 0.28.0 to 0.33.0 in /examples in the go_modules group by @​dependabot in https://github.com/dexidp/dex/pull/3912
• build(deps): bump google.golang.org/api from 0.203.0 to 0.217.0 by @​dependabot in https://github.com/dexidp/dex/pull/3927
• build(deps): bump google.golang.org/grpc from 1.67.1 to 1.69.4 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3924
• build(deps): bump golang.org/x/net from 0.27.0 to 0.33.0 in /api/v2 in the go_modules group by @​dependabot in https://github.com/dexidp/dex/pull/3910
• build(deps): bump google.golang.org/grpc from 1.65.0 to 1.69.4 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3925
• build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @​dependabot in https://github.com/dexidp/dex/pull/3931
• build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3943
• build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.0 by @​dependabot in https://github.com/dexidp/dex/pull/3939
• build(deps): bump oras-project/setup-oras from 1.2.1 to 1.2.2 by @​dependabot in https://github.com/dexidp/dex/pull/3936
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.8 to 3.4.10 by @​dependabot in https://github.com/dexidp/dex/pull/3932
• build(deps): bump docker/build-push-action from 6.9.0 to 6.13.0 by @​dependabot in https://github.com/dexidp/dex/pull/3949
• build(deps): bump github/codeql-action from 3.28.0 to 3.28.8 by @​dependabot in https://github.com/dexidp/dex/pull/3956
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 by @​dependabot in https://github.com/dexidp/dex/pull/3933
• build(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.4 by @​dependabot in https://github.com/dexidp/dex/pull/3947
• build(deps): bump actions/setup-go from 5.1.0 to 5.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/3935
• build(deps): bump github.com/beevik/etree from 1.4.1 to 1.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/3966
• build(deps): bump anchore/sbom-action from 0.17.9 to 0.18.0 by @​dependabot in https://github.com/dexidp/dex/pull/3960
• build(deps): bump mheap/github-action-required-labels from 5.4.2 to 5.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/3961
• build(deps): bump actions/attest-build-provenance from 2.1.0 to 2.2.0 by @​dependabot in https://github.com/dexidp/dex/pull/3962
• build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.17 to 3.5.18 by @​dependabot in https://github.com/dexidp/dex/pull/3963
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.17 to 3.5.18 by @​dependabot in https://github.com/dexidp/dex/pull/3965
• build(deps): bump google.golang.org/api from 0.217.0 to 0.219.0 by @​dependabot in https://github.com/dexidp/dex/pull/3964
• build(deps): bump golang.org/x/oauth2 from 0.25.0 to 0.26.0 by @​dependabot in https://github.com/dexidp/dex/pull/3969
• build(deps): bump golang from 1.23.5-alpine3.20 to 1.23.6-alpine3.20 by @​dependabot in https://github.com/dexidp/dex/pull/3972
• build(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/3970
• build(deps): bump golang.org/x/oauth2 from 0.25.0 to 0.26.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3968
• build(deps): bump google.golang.org/api from 0.219.0 to 0.220.0 by @​dependabot in https://github.com/dexidp/dex/pull/3973
• build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @​dependabot in https://github.com/dexidp/dex/pull/3975
• build(deps): bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @​dependabot in https://github.com/dexidp/dex/pull/3977
• build(deps): bump docker/setup-qemu-action from 3.3.0 to 3.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/3978
• build(deps): bump golang.org/x/crypto from 0.32.0 to 0.33.0 by @​dependabot in https://github.com/dexidp/dex/pull/3980
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @​dependabot in https://github.com/dexidp/dex/pull/3981
• build(deps): bump google.golang.org/api from 0.220.0 to 0.221.0 by @​dependabot in https://github.com/dexidp/dex/pull/3985
• build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.36.5 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3976
• build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3944
• build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3988
• build(deps): bump golang from 1.23.6-alpine3.20 to 1.24.0-alpine3.20 by @​dependabot in https://github.com/dexidp/dex/pull/3984
• Update Go to 1.24 by @​sagikazarmark in https://github.com/dexidp/dex/pull/3993
• build(deps): bump alpine from 3.21.2 to 3.21.3 by @​dependabot in https://github.com/dexidp/dex/pull/3986
• build(deps): bump golang from 9fed402 to 79f7ffe by @​dependabot in https://github.com/dexidp/dex/pull/3992
• build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @​dependabot in https://github.com/dexidp/dex/pull/3987
• build(deps): bump github.com/go-sql-driver/mysql from 1.8.1 to 1.9.0 by @​dependabot in https://github.com/dexidp/dex/pull/3991

New Contributors

• @​hur made their first contribution in https://github.com/dexidp/dex/pull/3700
• @​koendelaat made their first contribution in https://github.com/dexidp/dex/pull/3598
• @​IvoGoman made their first contribution in https://github.com/dexidp/dex/pull/3748
• @​dsonck92 made their first contribution in https://github.com/dexidp/dex/pull/3778
• @​siarhei-haurylau made their first contribution in https://github.com/dexidp/dex/pull/3793
• @​emmanuel-ferdman made their first contribution in https://github.com/dexidp/dex/pull/3755
• @​zvlb made their first contribution in https://github.com/dexidp/dex/pull/2941
• @​meldsza made their first contribution in https://github.com/dexidp/dex/pull/3676
• @​nrwiersma made their first contribution in https://github.com/dexidp/dex/pull/3868
• @​JanMkl made their first contribution in https://github.com/dexidp/dex/pull/3930
• @​kotx made their first contribution in https://github.com/dexidp/dex/pull/3950
• @​bobmaertz made their first contribution in https://github.com/dexidp/dex/pull/3941

Full Changelog: dexidp/dex@v2.41.0...v2.42.0

v2.41.1

Compare Source

What's Changed

Bug Fixes 🐛

• Fix ldap connection error: network unreachable @​nabokihms in https://github.com/dexidp/dex/pull/3677
• Fix gomplate fork/exec error for distroless images by @​nabokihms in https://github.com/dexidp/dex/pull/3684

Full Changelog: dexidp/dex@v2.41.0...v2.41.1

v2.41.0

Compare Source

What's Changed

Exciting New Features 🎉

• Enrich Dex logs with real IP and request ID by @​nabokihms in https://github.com/dexidp/dex/pull/3661
• gRPC Connectors API by @​twoojoo in https://github.com/dexidp/dex/pull/3245

[!IMPORTANT]
Connectors API is disabled by default. Set the DEX_API_CONNECTORS_CRUD=true env variable to enable the feature.

Enhancements 🚀

• Prevent double clicking of the submit button on login by @​pcorliss in https://github.com/dexidp/dex/pull/3554
• Gracefully handle no args being passed to entrypoint by @​rgmz in https://github.com/dexidp/dex/pull/3589
• New Prometheus metrics build_info by @​nlamirault in https://github.com/dexidp/dex/pull/3558
• Always retrieve github emails when preferredEmailDomain is set by @​thesuperzapper in https://github.com/dexidp/dex/pull/3584
• Propagate http.Client to JWT verifier for OIDC connector by @​jack-r-warren in https://github.com/dexidp/dex/pull/3641
• Fix the broken link to v2 page by @​tuladhar in https://github.com/dexidp/dex/pull/3648
• Add regex for oidc group matching by @​jacksonargo in https://github.com/dexidp/dex/pull/3063

Bug Fixes 🐛

• Remove additional features and add a feature flag instead by @​nabokihms in https://github.com/dexidp/dex/pull/3663

Dependency Updates ⬆️

• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3582
• build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.3.1 by @​dependabot in https://github.com/dexidp/dex/pull/3580
• build(deps): bump github/codeql-action from 3.25.7 to 3.25.12 by @​dependabot in https://github.com/dexidp/dex/pull/3619
• build(deps): bump actions/dependency-review-action from 4.3.2 to 4.3.4 by @​dependabot in https://github.com/dexidp/dex/pull/3618
• build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 by @​dependabot in https://github.com/dexidp/dex/pull/3617
• build(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.24.0 by @​dependabot in https://github.com/dexidp/dex/pull/3615
• build(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /examples in the go_modules group by @​dependabot in https://github.com/dexidp/dex/pull/3612
• build(deps): bump distroless/static-debian12 from e9ac71e to 8dd8d3c by @​dependabot in https://github.com/dexidp/dex/pull/3604
• build(deps): bump docker/build-push-action from 5.3.0 to 6.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/3603
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3609
• build(deps): bump golang.org/x/net from 0.25.0 to 0.27.0 by @​dependabot in https://github.com/dexidp/dex/pull/3606
• build(deps): bump golang.org/x/crypto from 0.23.0 to 0.25.0 by @​dependabot in https://github.com/dexidp/dex/pull/3605
• build(deps): bump alpine from 3.20.0 to 3.20.1 by @​dependabot in https://github.com/dexidp/dex/pull/3591
• build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3600
• build(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 by @​dependabot in https://github.com/dexidp/dex/pull/3567
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 by @​dependabot in https://github.com/dexidp/dex/pull/3627
• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @​dependabot in https://github.com/dexidp/dex/pull/3621
• build(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 by @​dependabot in https://github.com/dexidp/dex/pull/3625
• build(deps): bump actions/attest-build-provenance from 1.3.1 to 1.3.3 by @​dependabot in https://github.com/dexidp/dex/pull/3624
• build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @​dependabot in https://github.com/dexidp/dex/pull/3631
• build(deps): bump anchore/sbom-action from 0.16.0 to 0.17.0 by @​dependabot in https://github.com/dexidp/dex/pull/3630
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.3 by @​dependabot in https://github.com/dexidp/dex/pull/3626
• build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by @​dependabot in https://github.com/dexidp/dex/pull/3622
• build(deps): bump docker/build-push-action from 6.3.0 to 6.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/3623
• build(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/3629
• build(deps): bump github.com/AppsFlyer/go-sundheit from 0.5.0 to 0.5.1 by @​dependabot in https://github.com/dexidp/dex/pull/3635
• build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1 by @​dependabot in https://github.com/dexidp/dex/pull/3633
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @​dependabot in https://github.com/dexidp/dex/pull/3634
• Update dependencies before Dex v2.41 by @​nabokihms in https://github.com/dexidp/dex/pull/3637
• build(deps): bump alpine from 3.20.1 to 3.20.2 by @​dependabot in https://github.com/dexidp/dex/pull/3647
• build(deps): bump google.golang.org/api from 0.182.0 to 0.189.0 by @​dependabot in https://github.com/dexidp/dex/pull/3646
• build(deps): bump github/codeql-action from 3.25.12 to 3.25.14 by @​dependabot in https://github.com/dexidp/dex/pull/3651
• build(deps): bump actions/upload-artifact from 3.1.3 to 4.3.4 by @​dependabot in https://github.com/dexidp/dex/pull/3607
• build(deps): bump golang from 8c9183f to 0d3653d by @​dependabot in https://github.com/dexidp/dex/pull/3657
• FIx CVE before Dex v2.41 by @​nabokihms in https://github.com/dexidp/dex/pull/3653
• Bump gomplate 4.0.1 by @​MoeBensu in https://github.com/dexidp/dex/pull/3652
• build(deps): bump github.com/AppsFlyer/go-sundheit from 0.5.1 to 0.6.0 by @​dependabot in https://github.com/dexidp/dex/pull/3655
• build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.6.1 by @​dependabot in https://github.com/dexidp/dex/pull/3658
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.14 to 3.5.15 by @​dependabot in https://github.com/dexidp/dex/pull/3639
• build(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by @​dependabot in https://github.com/dexidp/dex/pull/3645
• build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/3656
• build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/3643
• build(deps): bump docker/login-action from 3.2.0 to 3.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/3644
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.3 to 4.0.4 by @​dependabot in https://github.com/dexidp/dex/pull/3666
• build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0 by @​dependabot in https://github.com/dexidp/dex/pull/3667
• build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/3665
• Bump ent v0.14.0 by @​nabokihms in https://github.com/dexidp/dex/pull/3670
• build(deps): bump github/codeql-action from 3.25.14 to 3.25.15 by @​dependabot in https://github.com/dexidp/dex/pull/3664

New Contributors

• @​pcorliss made their first contribution in https://github.com/dexidp/dex/pull/3554
• @​rgmz made their first contribution in https://github.com/dexidp/dex/pull/3589
• @​nlamirault made their first contribution in https://github.com/dexidp/dex/pull/3558
• @​thesuperzapper made their first contribution in https://github.com/dexidp/dex/pull/3584
• @​twoojoo made their first contribution in https://github.com/dexidp/dex/pull/3245
• @​jack-r-warren made their first contribution in https://github.com/dexidp/dex/pull/3641
• @​tuladhar made their first contribution in https://github.com/dexidp/dex/pull/3648
• @​MoeBensu made their first contribution in https://github.com/dexidp/dex/pull/3652
• @​jacksonargo made their first contribution in https://github.com/dexidp/dex/pull/3063

Full Changelog: dexidp/dex@v2.40.0...v2.41.0

v2.40.0

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.40.0

Know before update

[!IMPORTANT]
Dex migrated to the log/slog for logging. Both text and json log format outputs changed.

The change can affect users, that import Dex as a library in their projects.

What's Changed

Exciting New Features 🎉

• Add introspect endpoint to introspect access & refresh token by @​supercairos in https://github.com/dexidp/dex/pull/3404
• Use log/slog for structured logging by @​seankhliao in https://github.com/dexidp/dex/pull/3502

Enhancements 🚀

• Add support for configurable prompt type for Google connector by @​abhisek in https://github.com/dexidp/dex/pull/3475
• Google: Implement groups fetch by default service account from metadata (support for GKE workload identity) by @​vsychov in https://github.com/dexidp/dex/pull/2989
• OIDC connector option to override jwksURI by @​sohgaura in https://github.com/dexidp/dex/pull/3543
• Allow domain names or IDs in keystone connector by @​cardoe in https://github.com/dexidp/dex/pull/3506

Bug Fixes 🐛

• Fix function names in comment by @​mountcount in https://github.com/dexidp/dex/pull/3464
• Fix slight grammar errors. by @​adeinega in https://github.com/dexidp/dex/pull/3538

Dependency Updates ⬆️

• build(deps): bump google.golang.org/api from 0.172.0 to 0.179.0 by @​dependabot in https://github.com/dexidp/dex/pull/3516
• build(deps): bump golang from 1.22.2-alpine3.18 to 1.22.3-alpine3.18 by @​dependabot in https://github.com/dexidp/dex/pull/3514
• build(deps): bump aquasecurity/trivy-action from 0.18.0 to 0.20.0 by @​dependabot in https://github.com/dexidp/dex/pull/3512
• build(deps): bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3508
• build(deps): bump anchore/sbom-action from 0.15.9 to 0.15.11 by @​dependabot in https://github.com/dexidp/dex/pull/3497
• build(deps): bump golang.org/x/net from 0.20.0 to 0.23.0 in /api/v2 in the go_modules group by @​dependabot in https://github.com/dexidp/dex/pull/3483
• build(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/3472
• build(deps): bump distroless/static-debian12 from 42c8865 to e9ac71e by @​dependabot in https://github.com/dexidp/dex/pull/3469
• build(deps): bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/3462
• build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3510
• build(deps): bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 by @​dependabot in https://github.com/dexidp/dex/pull/3526
• build(deps): bump google.golang.org/api from 0.179.0 to 0.180.0 by @​dependabot in https://github.com/dexidp/dex/pull/3525
• build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @​dependabot in https://github.com/dexidp/dex/pull/3524
• build(deps): bump helm/kind-action from 1.9.0 to 1.10.0 by @​dependabot in https://github.com/dexidp/dex/pull/3523
• build(deps): bump github/codeql-action from 3.24.10 to 3.25.4 by @​dependabot in https://github.com/dexidp/dex/pull/3522
• build(deps): bump mheap/github-action-required-labels from 5.4.0 to 5.4.1 by @​dependabot in https://github.com/dexidp/dex/pull/3521
• build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @​dependabot in https://github.com/dexidp/dex/pull/3520
• build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3465
• build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3460
• build(deps): bump alpine from 3.19.1 to 3.20.0 by @​dependabot in https://github.com/dexidp/dex/pull/3547
• build(deps): bump anchore/sbom-action from 0.15.11 to 0.16.0 by @​dependabot in https://github.com/dexidp/dex/pull/3545
• build(deps): bump github/codeql-action from 3.25.4 to 3.25.6 by @​dependabot in https://github.com/dexidp/dex/pull/3544
• build(deps): bump actions/checkout from 4.1.2 to 4.1.6 by @​dependabot in https://github.com/dexidp/dex/pull/3542
• build(deps): bump google.golang.org/api from 0.180.0 to 0.181.0 by @​dependabot in https://github.com/dexidp/dex/pull/3541
• build(deps): bump golang from 4531927 to ff6ab2b by @​dependabot in https://github.com/dexidp/dex/pull/3536
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @​dependabot in https://github.com/dexidp/dex/pull/3534
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.2 by @​dependabot in https://github.com/dexidp/dex/pull/3531
• build(deps): bump github.com/beevik/etree from 1.3.0 to 1.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/3530
• build(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3535
• build(deps): bump docker/login-action from 3.1.0 to 3.2.0 by @​dependabot in https://github.com/dexidp/dex/pull/3551
• build(deps): bump golang from ff6ab2b to d1a601b by @​dependabot in https://github.com/dexidp/dex/pull/3550
• build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 b

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.